Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367678F/925C80FC650B11EFBE290256762E951A/C8C3F9C2B0B511EF88E1CA4C762E951A.roa
File: C8C3F9C2B0B511EF88E1CA4C762E951A.roa (raw, json)
Hash identifier: Mh36UH7NwuelUC3NMhOTPwUhu32iweIo8TXpZWT/LM0=
Subject key identifier: 2B:B9:00:47:96:2A:8B:20:19:0A:B5:C2:F2:BC:D4:D3:88:8C:5A:33
Certificate issuer: /CN=F367678FAF/serialNumber=24B5EE674715A2EEEE8864EA5F5EE47323CF766C
Certificate serial: 6C
Authority key identifier: 24:B5:EE:67:47:15:A2:EE:EE:88:64:EA:5F:5E:E4:73:23:CF:76:6C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JLXuZ0cVou7uiGTqX17kcyPPdmw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367678F/925C80FC650B11EFBE290256762E951A/C8C3F9C2B0B511EF88E1CA4C762E951A.roa
Signing time: Mon 02 Dec 2024 14:00:27 +0000
ROA not before: Tue 03 Dec 2024 14:00:24 +0000
ROA not after: Sun 31 Aug 2025 14:00:24 +0000
asID: 37611
IP address blocks: 197.79.0.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367678F/925C80FC650B11EFBE290256762E951A/JLXuZ0cVou7uiGTqX17kcyPPdmw.crl
rsync://rpki.afrinic.net/repository/member_repository/F367678F/925C80FC650B11EFBE290256762E951A/JLXuZ0cVou7uiGTqX17kcyPPdmw.mft
rsync://rpki.afrinic.net/repository/afrinic/JLXuZ0cVou7uiGTqX17kcyPPdmw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 21 Feb 2025 03:10:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108 (0x6c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367678FAF
Validity
Not Before: Dec 3 14:00:24 2024 GMT
Not After : Aug 31 14:00:24 2025 GMT
Subject: CN=674dbd7b-7271
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d6:41:e9:68:f1:ae:74:8a:f7:eb:06:0e:bb:
f9:a7:c1:c3:96:03:b4:95:35:40:c9:08:f0:48:42:
c2:da:28:a3:3b:24:dc:6c:2c:be:5c:e2:da:bb:c7:
26:ce:2e:49:d0:8f:6b:17:8f:9d:59:91:cf:58:72:
81:d2:5f:7a:4e:33:15:99:91:22:66:d7:1c:14:6b:
fa:a1:37:41:0e:b9:e9:9a:4a:e2:39:7e:28:6a:da:
b5:39:7d:94:d6:57:c8:ad:27:b4:aa:b3:5d:e0:b9:
22:bf:a7:26:46:16:c1:91:47:f0:38:6c:7c:aa:2f:
d3:38:f9:70:72:7c:61:e7:68:00:3a:bb:60:6b:16:
0f:09:c0:8d:be:fa:e3:8e:1b:5c:9f:65:8f:ee:54:
90:1a:c0:f3:00:78:c2:a5:b1:ec:75:fd:2f:ed:8f:
40:d1:e0:b0:d7:23:a9:20:ab:5e:bc:30:67:85:5b:
4a:9c:ed:c2:8b:3d:a8:82:8b:b4:78:04:1a:a2:18:
f0:dd:11:94:7c:db:d3:53:f2:4a:31:fd:76:dd:4f:
e1:20:d7:fb:d8:3c:d7:2a:14:b4:7e:26:87:cf:49:
ab:0b:43:31:38:37:30:ec:5c:e4:36:d9:19:24:87:
c2:a6:44:ce:dc:d7:d1:de:fa:1a:65:72:8a:17:07:
df:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:B9:00:47:96:2A:8B:20:19:0A:B5:C2:F2:BC:D4:D3:88:8C:5A:33
X509v3 Authority Key Identifier:
keyid:24:B5:EE:67:47:15:A2:EE:EE:88:64:EA:5F:5E:E4:73:23:CF:76:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367678F/925C80FC650B11EFBE290256762E951A/JLXuZ0cVou7uiGTqX17kcyPPdmw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JLXuZ0cVou7uiGTqX17kcyPPdmw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367678F/925C80FC650B11EFBE290256762E951A/C8C3F9C2B0B511EF88E1CA4C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
197.79.0.0/17
Signature Algorithm: sha256WithRSAEncryption
18:e2:f0:3e:61:9c:19:be:b9:d7:9d:b2:41:53:ea:75:16:49:
47:17:88:df:44:e7:36:18:4e:de:88:84:af:4a:e7:c4:ba:e4:
b3:a3:2d:0a:2d:c6:6c:a2:da:86:97:b5:c3:0b:5a:2c:2b:1c:
bc:66:a0:7a:38:c4:a6:7e:f5:b1:40:fd:50:c8:51:3c:05:3d:
77:a5:27:a4:24:3d:37:ee:f8:e3:77:d8:ee:0e:06:ec:57:cc:
54:33:6f:f8:80:e2:20:d3:99:a4:3d:a7:f0:f6:9d:83:a8:44:
92:65:c1:46:66:5c:93:05:5a:8c:92:ba:e6:03:6e:98:57:3a:
4b:b6:22:1b:d6:eb:b4:2e:fd:8b:e4:62:e6:c7:ec:3d:64:48:
9f:25:94:a4:14:80:d7:6c:98:3a:0d:88:e7:5f:fe:90:93:d0:
c0:be:5d:87:49:14:73:6e:aa:2d:bf:eb:6c:a6:35:12:b9:d6:
38:a3:e0:17:a7:c8:10:ed:01:d2:aa:97:83:f5:d2:d5:eb:3c:
b1:1d:34:79:0a:50:4f:96:4c:72:20:1d:6b:fe:28:26:f2:3a:
ac:d3:0e:1b:48:9a:6c:51:0c:3d:ce:40:da:4f:2a:dd:d9:4a:
2e:e0:5f:61:09:c9:a4:10:50:07:9b:c8:1a:c4:6b:1d:57:6f:
b2:9b:4b:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:44:20 2025 by rpki-client